Horizon QCMS "/lib/functions/d-load.php"目录遍历漏洞

CVE ID:CVE-2013-7138 Horizon QCMS是支持PHP与MySQL的开放源码的Horizon快速内容管理系统。 该漏洞的存在是由于传递到"/lib/functions/d-load.php"脚本的"start" HTTP GET参数"fopen"方法中被使用前没有足够过滤，远程攻击者可以以Web服务器的权限在目标系统上读取任意文件内容。 0 Horizon QCMS=4.0 厂商补丁： Horizon ----- Horizon 4.0版本以修复此漏洞，建议用户下载使用：...

Multiple Vulnerabilities in Horizon QCMS

Advisory ID: HTB23191 Product: Horizon QCMS Vendor: Horizon QCMS Vulnerable Versions: 4.0 and probably prior Tested Version: 4.0 Advisory Publication: December 18, 2013 without technical details Vendor Notification: December 18, 2013 Vendor Patch: December 25, 2013 Public Disclosure: January 8,...

Horizon QCMS 4.0 SQL Injection / Directory Traversal

Advisory ID: HTB23191 Product: Horizon QCMS Vendor: Horizon QCMS Vulnerable Versions: 4.0 and probably prior Tested Version: 4.0 Advisory Publication: December 18, 2013 without technical details Vendor Notification: December 18, 2013 Vendor Patch: December 25, 2013 Public Disclosure: January 8,...

Multiple Vulnerabilities in Horizon QCMS

High-Tech Bridge Security Research Lab discovered multiple vulnerabilities in Horizon QCMS, which can be exploited to read contents of arbitrary files and perform SQL Injection attacks. 1 Path Traversal in Horizon QCMS: CVE-2013-7138 The vulnerability exists due to insufficient filtration of...

CVE-2012-1960

The CVE-2012-1960 entry affects Mozilla Firefox 4.x–13.0, Thunderbird 5.0–13.0, and SeaMonkey before 2.11. The qcms_transform_data_rgb_out_lut_sse2 function in the QCMS implementation may trigger an out-of-bounds read via a crafted color profile, allowing remote attackers to obtain sensitive info...

Out of bounds read in QCMS — Mozilla

Google developer Tony Payne reported an out of bounds OOB read in QCMS, Mozilla’s color management library. With a carefully crafted color profile portions of a user's memory could be incorporated into a transformed image and possibly deciphered...

QCMS 1.6 minor bugs and fixes-vulnerability warning-the black bar safety net

Baidu and GG told me so few people with so release. The problem in the background login authentication private function adminlogin if! empty$REQUEST'api' || $REQUEST'api' == $this-psite'connect' || $COOKIE'api' == $this-psite'connect' setcookie "api", $this-psite'connect', time + 3 1 5 3 6 0 0 0,...